book

Node Cookbook

Name: Node Cookbook
Author: David Mark Clements
ISBN: 9781849517188

by David Mark Clements

July 2012

Beginner to intermediate

342 pages

7h 27m

English

Packt Publishing

Read now

Unlock full access

Node Cookbook
Table of Contents
Node Cookbook
Credits
About the Author
About the Reviewers
www.PacktPub.com
Support files, eBooks, discount offers and moreWhy Subscribe?Free Access for Packt account holders
Preface
What this book covers
What you need for this book
Who this book is for

Conventions
Reader feedback
Customer support
Downloading the example code
Errata
Piracy
Questions
1. Making a Web Server
Introduction
Setting up a router
Getting readyHow to do it...How it works...There's more...Simple multilevel routingParsing the querystringRouting modulesSee also
Serving static files
Getting readyHow to do it...How it works...There's more...The favicon gotchaSee also
Caching content in memory for immediate delivery
Getting readyHow to do it...How it works...There's more...Reflecting content changesSee also
Optimizing performance with streaming
Getting readyHow to do it...How it works...There's more...Protecting against process memory overrunsSee also
Securing against filesystem hacking exploits
Getting readyHow to do it...How it works...There's more...WhitelistingNode-staticSee also
2. Exploring the HTTP Object
Introduction
Processing POST data
Getting readyHow to do it...How it works...There's more...Accessing POST data with connect.bodyParserSee also
Handling file uploads
Getting readyHow to do it...How it works...There's more...Using formidable to accept all POST dataPreserving filenames with formidableUploading via PUTSee also
Using Node as an HTTP client
Getting readyHow to do it...How it works...There's more...Sending POST requestsMultipart file upload as a clientSee also
Implementing download throttling
Getting readyHow to do it...How it works...Enabling resumes from broken downloadsSee also
3. Working with Data Serialization
Introduction
Converting an object to JSON and back again
Getting readyHow to do it...How it works...There's more...Constructing JSONP responsesSecurity and JSONPSee also
Converting an object to XML and back again
Getting readyHow to do it...How it works...There's more...Objects containing arrays and functionsGenerating XML attributesText values alongside attribute declarationsSee also
Browser-server transmission via AJAX
Getting readyHow to do it...How it works...There's more...Sending serialized data from client to serverSee also
Working with real data: fetching trending tweets
Getting readyHow to do it...How it works...Twitter API and the User-Agent headerThere's more...Cross referencing Google Hot Trends with Twitter tweetsSee also
4. Interfacing with Databases
Introduction
Writing to a CSV file
Getting readyHow to do it...How it works...There's more...Customizing the CSV elementsReading a CSV fileManipulating CSV as a streamSee also
Connecting and sending SQL to a MySQL server
Getting readyHow to do it...How it works...There's more...Using and cleaning user inputReceiving results from the MySQL serverSee also
Storing and retrieving data with MongoDB
Getting readyHow to do it...How it works...There's more...Indexing and aggregationUpdating modifiers, sort, and limitSee also
Storing and retrieving data with Mongoskin
Getting readyHow to do it...How it works...There's more...Collection bindingSee also
Storing data to CouchDB with Cradle
Getting readyHow to do it...How it works...There's more...Scaling CouchDB with BigCouchSee also
Retrieving data from CouchDB with Cradle
Getting readyHow to do it...How it works...There's more...Creating an admin userLocking all modifying operations to an admin userExposing the CouchDB HTTP interface to remote connectionsSee also
Accessing CouchDB changes stream with Cradle
Getting readyHow to do it...How it works...See also
Storing and retrieving data with Redis
Getting readyHow to do it...How it works...There's more...Speeding up node Redis moduleOvercoming network latency by pipelining commandsSee also
Implementing PubSub with Redis
Getting readyHow to do it...How it works...There's more...Redis authenticationSecuring Redis from external connectionsSee also
5. Transcending AJAX: Using WebSockets
Introduction
Creating a WebSocket server
Getting readyHow to do it...How it works...There's more...Supporting older Firefox browsersCreating a node-based WebSocket clientSee also
Seamless fallbacking with socket.io
Getting readyHow to do it...How it works...There's more...Custom eventsNamespacesSee also
Callbacks over socket.io transport
Getting readyHow to do it...How it works...There's more...Shared functions with NowjsSee also
Creating a real-time widget
Getting readyHow to do it...How it works...There's more...Preparing for scalabilityWebSockets as a development toolSee also
6. Accelerating Development with Express
Introduction
Generating Express scaffolding
Getting readyHow to do it...How it works...There's more...Picking apart app.jsLooking into routes/index.jsSee also
Defining and applying environments
Getting readyHow to do it...How it works...There's more...Setting other environmentsChanging NODE_ENV permanentlySee also
Dynamic routing
Getting readyHow to do it...How it works...There's more...Route validationOptional routesAsterisks wildcardsSee also
Templating in Express
Getting readyHow to do it...How it works...There's more...Using other template enginesEJS templatesLiteral JavaScript in JadeJade partialsExpress partialsJade includeslayout.jadeSee also
CSS engines with Express
Getting readyHow to do it...How it works...There's more...Nested mixins and rest parametersPlaying with colorsUsing the LESS engineSee also
Initializing and using a session
Getting readyHow to do it...How it works...There's more...Custom middleware for site-wide session managementFlash messagesSee also
Making an Express web app
Getting readyHow to do it...Creating a database bridgeConfiguring app.js filesModifying the profiler appModifying the mounted login AppHow it works...App mountingData FlowRoute handlingViewsMixinsHelpersStylesUser flowThere's more...BenchmarkingUsing loggerSee also
7. Implementing Security, Encryption, and Authentication
Introduction
Implementing Basic Authentication
Getting readyHow to do it...How it works...There's more...Basic Authentication with ExpressSee also
Cryptographic password hashing
Getting readyHow to do it...How it works...There's more...Uniquifying hashes with HMACHardened hashing with PBKDF2See also
Implementing Digest Authentication
Getting readyHow to do it...How it works...There's more...Logging out of authenticated areasSee also
Setting up an HTTPS web server
Getting readyHow to do it...How it works...There's more...HTTPS in ExpressSecuring Basic Authentication with SSL/TLSSee also
Preventing cross-site request forgery
Getting readyHow to do it...How it works...Cross-site scripting (XSS) circumventionThere's more...Auto-securing the POST forms with the CSRF elementsEliminating cross-site scripting (XSS) vulnerabilitiesSee also
8. Integrating Network Paradigms
Introduction
Sending email
Getting readyHow to do it...How it works...There's more...Using sendmail as an alternative transportHTML emailsSending attachmentsSee also
Sending SMS
Getting readyHow to do it...How it works...There's more...Using the processed event listenerMaking an automated phone callSee also
Communicating with TCP
Getting readyHow to do it...How it works...There's more...Port forwardingUsing pcap to watch TCP trafficSee also
Creating an SMTP server
Getting readyHow to do it...How it works...There's more...Receiving emails from external SMTP serversSee also
Implementing a virtual hosting paradigm
Getting readyHow to do it...How it works...There's more...Virtual hosting Express appsServer Name IndicationSee also
9. Writing Your Own Node Modules
Introduction
Creating a test-driven module API
Getting readyHow to do it...How it works...There's more...Unit tests with should.jsSee also
Writing a functional module mock-up
Getting readyHow to do it...How it works...There's more...Writing a module use case exampleSee also
Refactoring from functional to prototypical
Getting readyHow to do it...How it works...There's more...Adding the stat function to the initialized mp3dat objectAllowing for multiple instancesSee also
Extending the module's API
Getting readyHow to do it...How it works...There's more...Making the STDIN stream exampleMaking the PUT upload stream exampleMerging stat and statStreamIntegrating the EventEmitterSee also
Deploying a module to npm
Getting readyHow to do it...How it works...There's more...npm link.npmignore and npm versionSee also
10. Taking It Live
Introduction
Deploying to a server environment
Getting readyHow to do it...How it works...There's more...Using screen instead of nohupUsing authbind for privileged portsHosting multiple processes from port 80See also
Automatic crash recovery
Getting readyHow to do it...How it works...There's more...Detecting a respawn limit violationStaying up with foreverSee also
Continuous deployment
Getting readyHow to do it...How it works...There's more...Building module dependencies on updateWriting a Node Git hook for integrated testingSee also
Hosting with a Platform as a Service provider
Getting readyHow to do it...How it works...There's more...Assigning custom domains to Nodejitsu appsProvisioning a database with jitsuSee also
Index

Content preview from Node Cookbook

Preventing cross-site request forgery

There's a problem with every browser's security model that, as developers, we must be aware of.

When a user has logged in to a site, any requests made via the authenticated browser are treated as legitimate — even if the links for these requests come from an email, or are performed in another window. Once the browser has a session, all windows can access that session.

This means an attacker can manipulate a user's actions on a site they are logged in to with a specifically crafted link, or with automatic AJAX calls requiring no user interaction except to be on the page containing the malicious AJAX.

For instance, if a banking web app hasn't been properly CSRF secured, an attacker could convince the user to visit ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Publisher Resources

ISBN: 9781849517188

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

Node Cookbook

by David Mark Clements

Preventing cross-site request forgery

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.